Source routing, sort of

Michael T. Babcock
2001-12-24T20:57:24Z

I have a system with two interfaces, eth0 is on the Internet, eth1 on
an internal connection.  Because of using ipsec and its internal
routing, I need certain connections to be made from the internal
interface that will be going out over the ipsec0 device.

For example:
eth0: 1.2.3.4 (internet address)
ipsec0: 1.2.3.4 (always the same as the external interface)
eth1: 192.168.0.1 (internal address)

ping -n 192.168.1.1 (over VPN) attempts to send a ping from 1.2.3.4
because ipsec0''s interface address is 1.2.3.4.  How can I get arbitrary
connects, based on destination, to be sourced from 192.168.0.1 instead
of 1.2.3.4?

I''m assuming some basic source NATting is required; off to read the
docs again ...
--
Michael T. Babcock
CTO, FibreSpeed Ltd.     (Hosting, Security, Consultation, Database, etc)